Package Health/bonnier/wp-bonnier-purchase

bonnier/wp-bonnier-purchase

The narrow dependency set and stable release reduce complexity. However, the package has had no registry release since February 2020, no recent commits, and its README describes Guzzle rather than this WordPress package.

Latest 1.0.6

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was on February 6, 2020, with no releases in the last 12 months. That long silence is a substantial abandonment concern despite the package having seven releases overall.

Package scaffolding

The artifact includes a README and changelog, but the README excerpt identifies and documents Guzzle rather than bonnier/wp-bonnier-purchase. This weakens transparency for consumers even though the package includes basic documentation files.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived, but there is no recent activity to demonstrate ongoing maintenance.

Repo tooling

Composer is used as a build tool, which is positive, but no security-scanning tools were detected. For a package containing application code and bundled dependencies, that is a maintenance and hygiene gap.

Security policy

The linked repository has no security policy. This does not prove a security problem, but it provides little guidance for reporting or handling vulnerabilities.